https://bz.apache.org/bugzilla/show_bug.cgi?id=60256

--- Comment #2 from Tim Allison <talli...@mitre.org> ---
The ole10Native object looks like a list of urls and keys...Corrupt data?

Should we add a length check in Ole10Native and call it a day?

        if (dataSize > data.length-ofs) {
            throw new Ole10NativeException("calculated data size > input byte
array-offset");
        }
        dataBuffer = new byte[dataSize];

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
For additional commands, e-mail: dev-h...@poi.apache.org

Reply via email to